Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 28 guests online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Forensicsarrow Gaining experience... first steps
EH-Net
May 24, 2013, 11:08:53 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Gaining experience... first steps  (Read 8422 times)
0 Members and 1 Guest are viewing this topic.
jimbob
Guest
« on: November 18, 2008, 05:41:10 AM »

Hi,
Kind of an open question; how can all the good people gain some experience with computer forensics? I know there is a lot of good training material out there but how can you gain real world experience, particularly if you've no previous field experience or already have a part/full-time job?

Are there opportunities to gain work experience by volunteering with law enforcement or private companies? There are lots of people here who would be interested to share your experiences.

Jimbob
Logged
BillV
Hero Member
*****
Offline Offline

Posts: 1892


View Profile WWW
« Reply #1 on: November 18, 2008, 07:35:39 AM »

I don't have any personal experience, but I was told by an instructor in a pentesting class that if I wanted to pursue forensics to first go get a certification and then go looking at the local law enforcement departments for an un-paid internship (probably doing mostly 'grunt work').
Logged
Ketchup
Hero Member
*****
Offline Offline

Posts: 1021



View Profile
« Reply #2 on: November 18, 2008, 09:53:49 AM »

I think that BillV is on to something there.   I always say that learning the technical aspect is quite easy.   However, investigative skills are tougher to teach.  If you can get attached to an experienced investigator, you will learn more than you can pick up from books and certifications.   The grunt work you would be doing is documentation, chain of custody, etc.  Learning proper procedures and documentation is extremely important.  It will save you on the stand someday.   

I think that if you want to get your foot in the door, you have to be prepared to relocate.   Most forensics jobs are in NYC and DC.   DC has most of the government jobs, NYC has most of the consulting companies.   There are other markets, but they are not as saturated.
Logged

~~~~~~~~~~~~~~
Ketchup
don
Editor-In-Chief
Administrator
Hero Member
*****
Offline Offline

Posts: 4169


Editor-In-Chief


View Profile WWW
« Reply #3 on: November 18, 2008, 01:55:14 PM »

One thing not mentioned is working for lawyers. There are plenty of them everywhere you go, and there are always civil cases dealing with computers. Also, since it is related to law, one can charge a huge sum. Here's an idea. Print up a bunch of professional looking flyers and snail mail them to every law office in your area offering certified skills. Follow up with email, a phone call or even a visit in person. We can even go the addiction route and offer their first hit... case... for free or drastically discounted. If they're happy with the service, you now have a client that will bring you continued work. Get 5 - 10 law offices as clients, and one should have a steady stream of work. With the new eDiscovery laws now on the books that require every case to look at computer files, this should be a gold mine.

Hmmm... sounds like something I should do!!

Don
Logged

CISSP, MCSE, CSTA, Security+ SME
Ketchup
Hero Member
*****
Offline Offline

Posts: 1021



View Profile
« Reply #4 on: November 18, 2008, 11:38:18 PM »

Most of my clients are lawyers.  They tend to favor established relationships and word of mouth advertising.  From my experience, its difficult to get your foot in the door.  Once you are in, you are in until you screw up Smiley.   

You also don't want to offer forensic services without proper experience to back it up.  Not only will you lack investigative skills and procedural knowledge, you will get killed on the stand.   Word gets around fast in the forensics community and you won't keep your job for long.
Logged

~~~~~~~~~~~~~~
Ketchup
sgt_mjc
Sr. Member
****
Offline Offline

Posts: 294


View Profile
« Reply #5 on: November 19, 2008, 09:01:22 AM »

Good advice from Ketchup. I know way too many lawyers form growing up and I have seen it too often that some one gets a new one on the stand. I would think gaining the experience with law enforcement first would be the way to start. Along the way, you'll be doing that networking thing and making those lawyer contacts.
Logged

Mike Conway
CISSP
CompTia Security +
C|EH
Joshsevo
Sr. Member
****
Offline Offline

Posts: 278


View Profile
« Reply #6 on: December 29, 2009, 11:14:46 PM »

Just bringing this thread back from the dead.


I am also new to the CF world and am still in school.  About to start my second CF course at Devry in a few days.

But a few months ago I was having one of those nights where I was doing nothing and just googled Computer Forensics in Denver, since I live here. 

Anyways found a few and I mean maybe like 3 sites and then went to their links and found a few more.  I emailed all of them asking for internships.

Nobody responded........Until a few days later.  I got a phone call which I had included my cell in the email. 

Anyways long story short I got a internship to hire for a local company 1 of 3 CF companies in the state.  Have not started yet.  But what he wants me to do is do like a part time contracting thing.  I guess.  I figure I won't be working on any real cases but it's a paid intern.

The thing is I can't leave me full time job that I have until he is ready to pay me what I make currently and also give me benefits.  I have a crazy good job that pays enough (maybe not enough but ok)  but they pay for all my benefits. 

I am just fortunate enough to find a guy willing to train me locally cause I was for sure  I was moving somewhere else.

So my suggestion is to email people whenever possible about interns.
Logged

Security+, Network+, C|EH, CHFI, CPT
UNIX
Hero Member
*****
Offline Offline

Posts: 1235


View Profile
« Reply #7 on: January 02, 2010, 06:53:57 AM »

Did you made any progress in terms of this, jimbob, since you started the thread about a year ago? Would be interesting to know if you could proceed somehow, and if, how you did. Wink

Logged
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.062 seconds with 24 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.